-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

MediaWiki 1.5.6 and 1.4.14 are security and bugfix maintenance releases.

A bug in edit comment formatting could send PHP into an infinite loop if certain malformed links were included. In most installations, this would cause the script to fail after PHP's 30-second failsafe timeout.

in 1.5.6, some improvements have been made to the installer which should make installation possible on a system with a broken MySQL "root" account. Some miscellaneous fixes are also present; see the complete change list at the end of the release notes, linked below.

1.3.x releases are also vulnerable to the loop bug, but we are no longer maintaining that branch, and it doesn't work with current versions of PHP. Older installations probably should consider upgrading for the numerous bug fixes etc.

Release notes: 1.5.6: http://sourceforge.net/project/shownotes.php?release_id=386609 1.4.14: http://sourceforge.net/project/shownotes.php?release_id=386608

Download: http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.5.6.tar.gz?download http://prdownloads.sourceforge.net/wikipedia/mediawiki-1.4.14.tar.gz?downloa...

MD5 checksums: adcb318d812af2d2637374a8aadc79c1 mediawiki-1.5.6.tar.gz 5cafd5f6adea43be0fedd64883d50127 mediawiki-1.4.14.tar.gz

SHA-1 checksums: 8e0df360ddf5b267dd2b62e59a24c6921ccd1c43 mediawiki-1.5.6.tar.gz d3e57bb777a3ec8cc07d97ebf6afa850f3f743ab mediawiki-1.4.14.tar.gz

Before asking for help, try the FAQ: http://meta.wikimedia.org/wiki/MediaWiki_FAQ

Low-traffic release announcements mailing list: (Please subscribe to receive announcements of security updates.) http://mail.wikipedia.org/mailman/listinfo/mediawiki-announce

Wiki admin help mailing list: http://mail.wikipedia.org/mailman/listinfo/mediawiki-l

Bug report system: http://bugzilla.wikimedia.org/

Play "stump the developers" live on IRC: #mediawiki on irc.freenode.net

- -- brion vibber (brion @ pobox.com / brion @ wikimedia.org)